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ABSTRACT 



A changer device according to the present invention 
includes: a plurality of storage media; a magazine for 
holding the plurality of storage media; a plurality of drives 
for reading and writing data to storage media, each of these 
drive reading and writing data to a storage medium selected 
from the plurality of storage media; and a media transporting 
device transporting the selected storage medium to the drive 
as well as transporting the moved storage medium to the 
magazine. When a request to write data is issued, the data 
and parity data are stored in a striped manner on the plurality 
of storage media at the plurality of drives. If data cannot be 
read or written to a storage medium at one of the drives, the 
media transporting device transports an operational storage 
medium to this drive. Then, using the storage media at the 
drives, the data on the failed storage medium is recon- 
structed. This reconstructed data is stored on the operational 
storage medium. 

14 Claims, 15 Drawing Sheets 
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METHOD FOR MANAGING FAILED 
STORAGE MEDIA 

BACKGROUND OF THE INVENTION 

The present invention relates to a method for handling 
failed media in devices for managing storage media 
(generally known as changer devices). More specifically, the 
present invention relates to a system for managing failed 
media where a plurality of changer devices is linked to form 
a disk array system. 

As a substitute for hard disk devices (HDD: Hard Disk 
Drives) used in a standalone manner, the use of disk array 
systems (RAID: Redundant Arrays of Inexpensive Disks) is 
being studied. Such systems involve an external storage 
device that speeds up reads and writes by operating multiple 
hard disk devices concurrently while improving reliability 
through redundancy, as described for example, in "A Case 
for Redundant Arrays of Inexpensive Disks (RAID)" (David 
A. Patterson, Garth Gibson, and Randy H. Katz, Computer 
Science Division Department of Electrical Engineering and 
Computer Sciences, University of California Berkeley). In 
this paper, dilTerenl disk array structures are assigned level 
numbers from 1 to 5. RAID Level 3 can provide improved 
performance for sequential accesses involving transfer of 
large blocks of data. RAID Level 5 can provide improved 
performance for random accesses involving large numbers 
of small reads and writes. 

In the description below, magnetic disk devices that use 
fixed media are referred to as "hard disk drives" and are 30 
distinguished from storage devices that use removable 
media such as magneto-optical disk drives, optical disk 
drives, and magnetic disk drives. 

The following is a description, referencing FIG. 13 and 
FIG. 14, of RAID control operations. As shown in FIG. 13, 35 
a disk array device 101 includes a plurality of hard disk 
drives 111-115. A RAID controller 105 controls the manner 
in which data is striped to the plurality of hard disk drives. 
RAID controller 105 also determines how redundant data 
(parity) is generated and where this redundant data is stored. 40 

The disk array device shown in FIG. 13 includes five hard 
disk drives and contains data storage areas DO through D15, 
as shown in FIG. 14. These data storage areas are referred 
to as "stripes" and can store, for example, 32 KB of data. 

Redundant data (parity) storage areas PO-3, P4-7, P8-11, 
and P12-15, are also provided. Redundant data storage area 
PO-3 contains the exclusive OR (XOR) values of the data 
stored in stripe 0 (DO) through stripe 3 (D3), calculated as 
follows: 

(P0-3)=(Data from stripe 0) 

XOR (data from stripe 1) 

XOR (data from stripe 2) 

XOR (data from stripe 3) 

In general, a redundant data storage area Pm-n will hold 55 
the exclusive OR (XOR) values of the data stored in stripe 
m (Dm) through stripe n (Dn). This redundant data will be 
used if one of the hard disk drives in the disk array device 
fails. A description of the read and write operations per- 
formed when one of the hard disk drives has failed, a state 60 
referred to as "degraded mode", will be presented later. 

Stripe n through stripe m in the data storage area and 
redundant storage area Pm-n are together referred to as a 
stripe group. The disk array device is seen by the host 
computer as a single logical storage device wherein stripe 0 65 
through stripe 15 are continuous. Physically, however, the 
data is stored as stripes on a plurality of hard disk drives. 



45 



50 



First, the operations involved when a host computer 100 
reads data from a disk array device 101 will be described. 
For example, to read data stored in stripe 4 and stripe 5, host 
computer 100 issues a read request for this data to disk array 
device 101. Disk array device 101 reads stripe 4 on hard disk 
drive 111 and stripe 5 on hard disk drive 112 and transfers 
the data to host computer 100. 

Next, the operations involved when host computer 100 
writes data to disk array device 101 will be described. Since 
write operations performed by disk array device 101 involve 
redundant data, the methods used are different from those 
that would be used with a standalone hard disk drive. When 
writing data, redundant data needs to be updated as well. 
There are two methods for updating the redundant data. 

For example, in writing data to stripe 6, one method 
involves reading data from stripe 4, stripe 5, and stripe 7, 
which all belong to the same stripe group as stripe 6. Then 
the following operations are performed to determine the 
redundant data: 

(P4-7)=(data from stripe 6) 

XOR (data from stripe 4) 

XOR (data from stripe 5) 

XOR (data from stripe 7) 
Then, the data is written to stripe 6 and the redundant data 
is written to parity storage area P4-7. 

In a second method for writing data to stripe 6, the data 
contained in stripe 6 before the write operation (referred to 
as the "old stripe 6 data") and the data contained in parity 
storage area P4-7 before the write operation (referred to as 
"the old parity storage area P4—7 data"), are read. The stripe 
6 data to be written (the new stripe 6 data) is used to 
calculate redundant data using the following operations: 

(P4~7)«(data from stripe 6) 

XOR (old stripe 6 data) 

XOR (old P4-7 data) 
Next, the data is written to stripe 6 and the redundant data 
is written to P4-7. 

Disk array devices require a greater number of accesses to 
hard disk drives since it is necessary to write and update 
redundant data in addition to the main data. 

The following is a description of read operations per- 
formed in degraded mode by a disk array device that uses 
parity for redundant data. In this example, hard disk drive 
111 in FIG. 14 becomes inaccessible due to failure and data 
stored in stripe 4 and stripe 5 must be read. The disk array 
device first tries to read the first half of the data from stripe 
4 but cannot perform the read operation due to the failure. 
In this case, disk array device 101 reads redundant data P4-7 
and the data on stripe 5, stripe 6, and stripe 7. The following 
operations are then performed to recover the data on stripe 
4: 

(Data from stripe 4)*=(P4-7) 
XOR (data from stripe 5) 
XOR (data from stripe 6) 
XOR (data from stripe 7) 

The recovered data from stripe 4 and the data read from 
stripe 5 are transferred to the host computer. Thus, data can 
be read even if one of the hard disk drives has failed. 

Of course, if the disk array device knows beforehand that 
hard disk drive 111 has failed, the read operation for stripe 
4 can be omitted. 

To be able to reconstruct data correctly in degraded mode, 
the correct redundant data (parity) must be generated. There 
are two methods for keeping the data and the redundant data 
consistent (parity generation). 
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In the first method, the following operations are per- a system in which the present invention is implemented can 

formed for each of the stripe groups: easily remove the failed storage medium from the changer. 

(Pmn)=(data from stripe m) This also prevents the wrong storage medium from being 

[ . . . ] removed when a failure takes place. 

XOR (data from stripe n) 5 i n order to achieve the objects of the present invention, 

In the second method, zeros are written to each of the hard means for identifying is disposed on specific means for 

disk drives that are in the disk array. Compared to the first holding storage media (element) in the changer device, 

method, which requires calculations to be performed the allowing a person to identify the specific holding means. The 

second method simply wntes predetermined data to the hard faikd media fe supported in ^ element havin identifyiag 

disk drive, thus simplifying the operation. As long as parity, jo means 

as described above, is maintained, non-zero data can be n ' „ 

used Possible identification methods include applying a color 

When a hard disk drive has failed, a new hard disk drive 10 a specific element or disposing the specific element at the 

must be connected in place of the failed hard disk drive to uppermost position or the lowermost position in a magazine, 

restore normal operations. If the system is equipped with a - Th e magazine referred to here is a magazine that can manage 

spare hard disk drive, this spare drive can be used. a plurality of elements as one set. It would also be possible 

To restore data, all the data that had been in the failed hard to have a magazine containing only a specific element, and 

disk drive 111 must be reconstructed on the newly connected to have that magazine be removable or fixed, 
(or spare) hard disk drive. RAID controller 105 restores data 

for stripe 0, stripe 4, stripe 8, and stripe 12, in that order. To BRIEF DESCRIPTION OF THE DRAWINGS 

restore the data for stripe 0, the following operations are 20 + . , . c • j- . .i_ 

c , . v * B v FIG. 1 is a drawing of a magazine according to the present 

a c ' * • a\ /t^a i\ invention. 

(Data for stnpe OHPO-3) . 

XOR (data from stripe 1) FIG * 2 1S a drawm § snowing a magazine and a medium. 

XOR (data from stripe 2) FIG. 3 is a drawing showing an outer view of the changer 

XOR (data from stripe 3) 25 device according to the first embodiment. 

The restored stripe 0 data is then written to the newly FIG. 4 is a drawing showing the internal structure of the 

connected hard disk drive, thus recovering the data from changer device according to the first embodiment, 

stripe 0. The data from stripe 4, stripe 8, and stripe 12 are piG. 5 is a drawing showing an outer view of a disk array 

recovered in a similar manner, so that all data is restored. device in which five changer devices are 

Once all the data has been restored, the system shifts from 30 , . j . , . t 

degraded mode to a normal operation state, and read and FIG ; 6 » a u drawin S f owl u n S the connections in the disk 

write operations can be performed as before. arra V devioe that uses five cnan S er devices ' 

In conventional disk array devices, the use of storage FIG. 7 is a drawing showing a magazine for failed media 

devices having fixed storage media such as hard disk drives and a magazine for spare media. 

was assumed. Thus, the use of removable storage media and 35 FIG. 8 is a drawing showing a magazine used in the 

storage devices in disk array devices was not considered. In second embodiment and the third embodiment, 

particular, there has been no consideration of disk array rj „ n . , . « t - , , 

devices that use changer devices to manage a plurality of A } ? * a d ^wing showing an outer view of the changer 

storage media and to transport a desired storage medium to device 1D the second embodiment. 

a drive. 40 FIG. 10 is a drawing showing the internal structure of the 

FIG. 15 shows a system based on a disk array device that changer device in the second embodiment, 

uses removable storage media. In place of hard disk drives FIG. 11 is a drawing showing an outer view of a changer 

111 through 115 shown in FIG. 13, FIG. 15 shows remov- ^ w ' xoe> m tne lmrd embodiment. 

able storage media 211 through 215 and drive devices 221 cin n • i „,,• t . n . , • , r n . _ 

*u u >*%e t .u * l • r*in 1 e *u FIG. 12 is a drawing showing an outer view of a changer 

through 225. In the system shown in FIG. 15, the array can , . tl _ iL . . ? f & 

i_ 11 j * ii_ l j j' 1 j • 45 device in the third embodiment, 
be controlled in the same manner as a hard disk drive array 

when storage media are mounted in the drive devices. Read FIG - 13 is a drawing showing a conventional disk array 

and write operations performed in degraded mode when a device that uses hard disk drives, 

storage medium or a drive device is malfunctioning are FIG. 14 is a drawing showing a conventional arrangement 

handled in the same way as well. of data and redundant data. 

In the disk array device made up of drive devices and 50 pjQ 15 fe a drawing showing a disk array device using 

removable storage media as shown in FIG. 15, recovery rem0 vable storage media according to a conventional tech- 

after failure of one of the storage media would be handled nology. 
by replacing the failed storage medium with a new storage 

medium placed in the drive device and by reconstructing the DETAILED DESCRIPTION OF THE 

data in the new storage medium. This replacement of storage 55 PREFERRED EMBODIMENTS 

media can be performed manually by the administrator, but ™ f „ . . . iL - 4 

it would also be possible to automate the process through the . 11,6 M]o ™& V d^r.p..on with references to the 

use of a changer device that handles a plurality of storage dnwn ^ of ,he «"»»diinents of the V'™ 1 >" vent ' 0 "' 

media. When a storage medium is replaced using a changer Embodiment 

device, the placement of the failed storage medium, which 60 

can no longer be used, becomes important since it is often J ^ Allowing is a description, with references to the 

not possible to recognize failed storage media visually. drawings, of the first embodiment of the present invention. 

FIG. 1 and FIG. 2 show a magazine 10 used in the present 

OBJECTS AN^UMMARY OF THE invention. A magazine provides shelf-like structures for 

65 holding a plurality of storage media. Magazine 10 includes 

The object of the present invention is to easily identify a a plurality of elements 59 for holding media. As shown in 

failed storage medium in a changer. An administrator using FIG. 2, a medium 30 is.placed on a tray 20 and is stored in 
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an element 59 of magazine 10. The magazine shown in FIG. FIG. 5 shows a disk array device that uses five changer 
1 and FIG. 2 contains twelve elements 59 and can hold devices 300. Five changer devices 300 are connected to a 
twelve media. disk array controller 400 to provide data striping, centralized 
As shown in FIG. 1, the magazine according to the present processing and generation and processing of redundant data, 
invention is color coded using three colors to form a first 5 Disk array controller 400 and host computer 100 are con- 
color section 40, a second color section 50, and a third color nected via a SCSI bus 109 

section 52. Furthermore, holes 55 are formed on magazine J F f G * * shows how disk array controller 400 and changer 

10. First color section 40 and second color section 50 allow ^S?? 300 a T a ? n?^? deV f S i! ^° 

users to visually distinguish by color the bottom two ele- SCSI ^ SS f % v SCS 

mems of the twelve elements" Magazine 10 is used by a io a ° d 

i_ j ■ in« l -j *•<! .1. . ri / • 399 are used tor the SCSI bus connections. 

changer device 300, which identifies the type of elements in ~. . 4 4 , „ , , . 

* „ - M rt L rtl « « r „ tU - „ m ulA;~~ n * Dlsk arra y controller 400 controls five changer devices 

he magazine using hole i 55 In i this embodiment, element 300 so that they appear to host computer 100 as if they were 

types are also identified by the depth of holes 55. a ^ changef ^ When a ^ tfansfer req > est [s 

In this embodiment, color coding is performed with the received from host computer 100, disk array controller 400 

first color section being "white", the second color section 15 takes this request and sends them to all five changer devices 

being "red", and the third color section being "green". 300. 

FIG. 3 shows the outer appearance of changer device 300. The five changer devices 300 that make up the RAID 

Changer device 300 includes a door 301 that can be opened system each contain two magazines 10. As shown in FIG. 1, 

and closed. When door 301 is opened, magazine 10 can be each magazine 10 has twelve elements so elements are 

inserted or removed. In the changer 300 shown in FIG. 3, 20 assigned element numbers 1 through 24. Starting from the 

two magazines 10 can be mounted. A handle 99 is formed on top, the first magazine contains elements numbers 1 through 

the back surface of magazine 10 to allow easy handling 12, and the second magazine contains elements numbers 13 

when mounting to changer device 300. Changer device 300 through 24. Eleven media are mounted in each magazine, 

includes an LCD (liquid crystal display) display 302 to with the magazines holding media for element numbers 1 

indicate the status of changer device 300. 2 through 11 and element numbers 13 through 23. Media are 

FIG. 4 shows the internal structure of changer device 300. not mounted in the lowermost element numbers 12 and 24 

Changer device 300 contains: two magazines 10; an acces- of magazines 10. 

sor to grasp and transport medium 30 and tray 20; a drive Disk array controller 400 controls the five changer 

350 for performing read and write operations on medium 30; 3Q devices so that they appear to host computer 100 as a single 

and an accessor controller 310 for controlling the accessors. changer device. In this arrangement, disk array controller 

The accessor includes a vertical positioning section 320 that 400 appears to host computer 100 as a changer device 

can be moved up and down, and a handle 325 that can grasp having twenty array elements (numbers 1 through 20) and a 

media and move forward and back. single drive (number 100). These twenty array elements 

A higher- level system sends commands to accessor con- 35 correspond to element numbers 1 through 10 and 13 through 

troller 310 via a SCSI bus 398 to move a medium. When the 22 of the five changer devices 300. In other words, element 

command is received, accessor controller 310 controls ver- numbers 11, 12, 23, and 24 of changer devices 300 are 

tical positioning section 320 so that handle 325 is positioned hidden from host computer 100. 

to the height at which the desired medium is located. Handle For example, when host computer 100 issues a command 

325 is moved forward and then back to pull out desired 4Q to transfer media from array element number 1 to array 

medium 30. This medium 30 is transported to drive 350 element number 100, disk array controller 400 issues a 

where it is mounted on to drive 350. This series of operations command to the five changer devices to transfer media from 

allows read and write operations to be performed on the elements number 1 to elements number 100. Changer 

desired medium. The higher-level system then sends read devices 300 take out the media from the uppermost elements 

and write commands to drive 350 via SCSI bus 394. The 45 (elements number 1) of the first magazines and mount them 

data read from and written to the medium is transferred via onto drives 350. This media transfer operation is performed 

SCSI bus 394. for all five changer devices 300, whereupon disk array 

In this embodiment, a DVD-RAM drive is used for drive controller 400 notifies host computer 100 that the media has 

350, and DVD-RAM media are stored in magazine 10. been transferred. 

All media transfer requests sent to changer device 300 are 50 If host computer 100 issues a command to transfer media 

based on element numbers. Changer device 300 shown in from array element number 11 to array element number 100, 

FIG. 4 uses two magazines that can each be mounted with disk array controller 400 sends a command to the five 

twelve media, so element positions are referenced with changer devices to transfer the media from elements number 

element numbers 1 through 24. Also, since changer device 13 to element number 100. Array element number 11 is 

300 contains one drive 350, drive 350 is referenced as 55 changed to element number 13 because element numbers 11, 

element number 100. 12 of changer devices 300 are hidden. Changer devices 300 

For example, if a media transfer is requested from element take out the media from the uppermost elements (number 

number 10 to element number 100, the medium in element 13) in the second magazines and mount them onto drives 

number 10 is mounted on the drive. If a media transfer is 350. When the media transfer operation is completed for all 

requested from element number 100 to element number 10, 60 five changer devices 300, disk array controller 400 notifies 

the medium mounted on the drive is returned to element 10. host computer 100 that the media has been transferred. 

If a media transfer is requested from element number 10 Once media has been mounted to drives 350 of the five 

to element number 100 and no media is present in element changer devices 300, it is possible to read and write data in 

number 10, a "source element empty" error is generated. If, the same manner as in the array configuration described for 

on the other hand, a medium is already present on the drive 65 the conventional technology shown in FIG. 14 and FIG. 15. 

(element number 100), a "destination element full" error is The media on which read and write operations are to be 

generated. performed are transported to the drives by disk array con- 
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troller 400 in response to a command from host computer shows magazine 12. The elements of magazine 11 are 

100. Disk array controller 400 issues a command to changer color-coded using second color section 50. Magazine 11 is 

devices 300 to transfer the five corresponding media to used only for holding failed media. The elements of maga- 

drives 350. Once the five media are mounted, read and write z i ne 13 are color coded using third color section 52. Maga- 

operations are performed. 5 zme 13 ^ on iy f or holding spare media. The elements 

If a medium in this type of RAID system with five Q f magazine 12 are color-coded using first color section 40. 

changer devices 300 fails and becomes inaccessible, opera- Magazine 12 stores standard media used by host computer 

tions can be continued using four media. Disk array con- jqq 

troller 400 transfers the medium that generated the failure to w , ^. . , 

an element identified by second color section 50. In this in u Magazine 11 and magazine 13 are magazines that can 

embodiment, the medium would be transferred to element 10 hold ^° media each. Since they are similar in shape and 

number 12 of the first magazine or to element number 24 of size, they may be mounted improperly in changer devices 

the second magazine. 304 Therefore, a cut-out 56 is formed on magazine 11 and 

Yin. .u a ■ • . . ■ . . j- i .11 Jim a cut-out 57 is formed on magazine 13 with the cut-outs 

when the administrator instructs disk array controller 400 . . _ ......... ... „ . .. 

to restore the data, a medium is taken out from an element 1S bein S formed at P»>S««Hy distinct positions. Projections 

•j *-c j u a.- -i i M/i * u ii c 15 corresponding to the cut-outs are formed on changer devices 

identified by third color section 52 (element number 11 from v . A & . 4 * , 

the first magazine or element number 23 from the second JJ^J" ° Dly ma 8 azules ^ matcmn S cut -° u,s can be 

magazine), and this medium is transported to drive 350. 

Once the medium is mounted to drive 350, disk array A label 18 * also P laced 0D magazine 11 to identify the 

controller 400 begins reconstructing the data. When the Q magazine as being for failed media. Similarly, a label 19 is 

reconstruction of data is completed, the system shifts from P laced on magazine 13 to identify it as being for spare 

the degraded mode to a normal operation state. media. 

To remove the medium on which the failure occurred, the Magazine 12 can hold twelve media. Unlike the magazine 

system administrator opens door 301 and takes out magazine in FIG. 1, magazine 12 is not formed with second color 

10. The medium stored in the element identified by second 25 section 50, third color section 52, or holes 55 since magazine 

color section 50 in the magazine is the medium on which the 12 is not used to hold failed media or spare media, 

failure occurred. By taking out the medium stored in the FIG. 9 shows changer device 304 as seen from the 

element identified by second color section 50 in the outside. Changer device 304 has a door 305 that can be 

magazine, the administrator is able to remove the failed opened and closed. When door 305 is opened, magazines 11, 

medium. With this embodiment, in addition to being color 30 magazines 12, and magazines 13 can be inserted and 

coded, the elements in which failed media are stored are removed. In changer device 304 shown in FIG. 9, two 

positioned at the lowermost positions of the magazine, thus magazines 12 and one each of magazine 11 and magazine 13 

making identification even simpler. can be mounted. Changer device 304 has a liquid crystal 

Also, it is possible to determine if a spare medium is display 302 for displaying the status of changer device 304. 

present by checking to see if a medium is in the position 35 FIG. 10 shows the internal structure of changer device 

indicated by third color section 52 of the magazine. If no 304. Although the magazines that are mounted are different, 

medium is present in the elements in the third color section, the internal structure is the same as that of changer device 

the administrator can add a medium. 300. 

Thus, since failed media and spare media are stored in fi ve changer devices 304 that make up the RAID 

elements identified by their physical positions in the maga- 40 sys tem each have two magazines 12. As shown in FIG. 8, 

zines as well as by colors, the presence of failed media and eac h magazine 12 has twelve elements and the elements are 

spare media can be determined by a quick visual inspection. assigned numbers from 1 to 24. Starting from the top, the 

Changer devices 300 identifies the elements for failed elements of the first magazine are numbered 1 through 12, 

media by using holes 56 on the magazine. As shown in FIG. and the elements of the second magazine are numbered 13 

4, changer devices 300 include detectors 330. Detectors 330 45 through 24. Twelve media are mounted in each magazine, 

detect holes 55 on magazines 10 and determine if the Changer devices 304 are controlled by disk array device 

magazine has elements where failed media or spare media 400 SQ that they appear as a single changer devicc l0 host 

can be stored. Holes 55 can be implemented by forming computer 100. To host computer 100, disk array device 400 

physical cavities, as in this embodiment. Alternatively, it appears t0 host computer 100 as a changer device having 24 

would also be possible to use optical sensors in conjunction 50 afray elements ( numb ered 1 through 24) and a single drive 

with materials having different reflectivity. (number 100). 

In this embodiment elements for storing failed media are Nq me(Jia afe mouQted {a ^ u M ^ 13 is 

distinguished from elements for storing spare media by moumed ^ media and p , aced - n chang£r deyice 3()4 The 

changing the depths of the cavities. ^ media stQred in magazine 13 are ^ as spare media> 

Second Embodiments elements in magazine 11 and magazine 13 are hidden from 

The following is a description, with references to the host computer 100. 

drawings, of the second embodiment of the present inven- If a medium in this type of RAID system with five 

tion. The second embodiment differs from the first embodi- changer devices 304 fails and becomes inaccessible, opera- 

ment in that instead of magazine 10, three types of maga- 60 lions can be continued using four media. Disk array con- 

zines (magazine 11, magazine 12, and magazine 13) are troller 400 transfers the failed medium to magazine 11, 

used. Also, changer devices 304 are used instead of changer which is identified by second color section 50. In this 

devices 300. Changer device 304 can be mounted with two embodiment, the medium is transferred to any empty ele- 

magazines 12 and one each of magazine 11 and magazine ment in magazine 11. 

13. 65 When the administrator issues a command to restore the 

In this embodiment, three types of magazines are used. data, disk array controller 400 removes a medium from 

FIG. 7 shows magazine 11 and magazine 12, and FIG. 8 magazine 13, which is color coded via third color section 52, 
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and transfers the medium to drive 350. When the medium is To remove the failed medium, the system administrator 

mounted on drive 350, disk array controller 400 begins opens a door 307 and takes out the medium held in an 

reconstructing the data. Once reconstruction of the data is element identified by second color section 50 in fixed 

completed, the system shifts from degraded mode to a element section 17. The failed medium can thus be taken out 

normal operation state. 5 °f tne system by removing the medium held in a magazine 

t trt „ f . nn ... . t i f Q ;i„„ element identified by second color section 50. In this 

In order to remove the medium on which the failure . . e , J A . . lf tl _ . 

j • 4 * ■ . , , t . embodiment, failed media is distinguished from the media in 

occurred, the system admimstrator opens door 305 and takes m ine n {hrQn ^ ^ ^ ^ of me ^ 

out magazine 11. The media held m magazine 11, which is for & failed media ^ well as mrou ^ ^ ^ of fixed clemem 

identified by second color section 50, are all media on which section 17 

failures took place. By taking out the media held in maga- 30 Furthermore) the ce of media cafl ^ checked 

zine 11, the administrator removes the failed media from the by seeing tf media fc present at lhird ^ section 52 of fixed 

system. In addition to color coding the elements holding element section 17. If the elements at third color section 52 

failed media, this embodiment dedicates a magazine spe- d 0 not con tain media, media can be added to make spare 

cifically for failed media to further simplify identification. media available. 

Also, the availability of spare media can be checked by 15 l n this manner, the presence of failed media and spare 

seeing if media is present in magazine 13, which is identified media can be easily determined visually by having the 

by third color section 52. If no media are present in elements holding failed media and spare media placed in 

magazine 13, media can be added to make spare media fixed element section 17 to separate these media from the 

available. ^ media stored in magazine 12. 

Thus, by dedicating separate magazines for failed media This embodiment can also be implemented by substitut- 

and for spare media, it is possible to simply check specific ing the changer device shown in FIG. 12 for the changer 

magazines to determine if there are any failed media or spare device shown in FIG. 11. While the changer device in FIG. 

media. 11 has only one fixed element section 17, the changer device 

25 in FIG. 12 has two fixed element sections 171 and 172. 

Third Embodiment Fixed element section 171 is marked with second color 

^ . „ , . . . , r 4 iL section 50 and fixed element section 172 is marked with 

Hie following is a description, with references to the ^ color section 52 ^ m aQd fixed 

drawings, of a third embodimen of the present mvention. demem m afe ^ fl ffom each Q 

The third embodiment is different from the second embodi- ^ ^ elemeQt ^^171 itio J toward the t of 

ment in that the second embodmient uses magazine 11 and 30 ^ ch devi and fixed dement m ositioned 

magazine 13 as magazines dedicated to failed media and tQward ^ bottom of ^ c deyice ^ ^ 

spare media, but the third embodiment uses ; a . cbangei : device reduces ^ M \iiy of errors by the administrator. 

306 having fixed elements for holding failed media and _ _ , 

s are media Furthermore, three separate doors 3071, 3072, and 3073 

spare m la are formed as shown in FIG. 12. For example, when failed 

This embodiment only uses magazine 12 shown in FIG. m ^ ^ {o be taken QUtj Qnly doQr 30?1 needs tQ be Qpened 

8. Failed media and spare media are not stored in magazine Tq add spare mediaj Qnly do0f 3073 needs tQ be opened ^ 

^* possibility of errors by the administrator can be reduced by 

In this embodiment, a changer device 306 has dedicated locking the doors or placing color-coded labels on the doors, 

elements for holding failed media and spare media. Fixed 4Q By using means for supporting storage media (elements) 

element section 17 is formed with a second color section 50 in means for mana gi ng storage media (changer devices), as 

and a third color section 52 to identify the elements for described in this specification, failed storage media can be 

holding failed media and the elements for holding spare easily identified in the changer. This allows the administrator 

media. Spare media is stored by placing a medium 30 on a using syslem t0 easily take out failed storage media from 

tray 20. 45 c h an g e rs. Furthermore, when taking out failed storage 

The media held in fixed element section 17 can be media, the administrator is prevented from mistakenly tak- 

transported by the accessor and can also be taken out by the ing out other storage media, 

administrator. In other words, the media can be manipulated What is claimed is: 

from the front or from the back. The accessor is stopped 1. A method for managing failed storage media in a 

when the door is opened to prevent the administrator from 50 changer device including a plurality of storage media, a 

handling the media when the accessor is operating. magazine for holding said plurality of storage media, a drive 

If a medium in this type of RAID system using five for reading and writing data to a storage medium selected 

changer devices 306 fails and becomes inaccessible, opera- from said plurality of storage media, and a media transport- 

tions can still be continued using four media. The medium ing device transporting said selected storage medium to said 

on which the failure took place is transferred by disk array 55 drive as well as transporting said selected storage medium to 

controller 400 to an element in fixed element section 17 said magazine, comprising the steps of: 

identified by second color section 50. In this embodiment, establishing a specific position in said magazine identifi- 

the medium can be transferred to any free element of the two able to a user by a first identifier and identifiable to said 

elements identified by second color section 50. media transporting device by a second identifier, said 

When the administrator issues a command to restore the 60 specific position being a destination for a failed storage 

data, disk array controller 400 takes out a medium from an medium when data cannot be read or written to said 

element in fixed element section 17 identified by third color failed storage medium disposed at said drive; and 

section 52, and transfers the medium to drive 350. The taking said failed storage medium disposed at said drive 

medium is mounted on drive 350 a nd disk array controller and storing said failed storage medium at said specific 

400 begins restoring the data. Once the data has been 65 position by said media transporting device, 

restored, the system shifts from degraded mode to a normal 2. A method for managing failed storage media in a 

operation state. changer device including a plurality of storage media, a 
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magazine for holding said plurality of storage media, a drive 
for reading and writing data to a storage medium selected 
from said plurality of storage media, and a media transport- 
ing device transporting said selected storage medium to said 
drive as well as transporting said selected storage medium to 
said magazine, comprising the steps of: 
detecting an inability to read or write data to a failed one 

of said storage media disposed at said drive; and 
storing said failed storage medium at said drive to a 
specific position in said magazine by said media trans- 
porting device identifiable to a user by a first identifier 
and identifiable to said media transporting device by a 
second identifier. 

3. A method for managing failed storage media as recited 
in claim 2, wherein said specific position is at an uppermost 
position of said magazine. 

4. A method for managing failed storage media as recited 
in claim 2, wherein said specific position is at a lowermost 
position of said magazine. 

5. A method for managing failed storage media in a 
changer device including a plurality of storage media, a 
magazine for holding said plurality of storage media, a 
plurality of drives for reading and writing data to storage 
media, each of said drives reading and writing data to a 
storage medium selected from said plurality of storage 
media, and a media transporting device transporting said 
selected storage media to said drives and transporting said 
selected storage medium to said magazine, comprising the 
steps of: 

storing said data and parity data in a striped manner on a 
plurality of storage media transported to said plurality 
of drives in response to requests to write data; 

transporting a failed one of said storage media at said 
drive to a position in said magazine by said medium 
transporting device identifiable to a user by a first 
identifier and identifiable to said media transporting 
device by a second identifier when one drive of said 
plurality of drives is incapable of reading or writing 
data to the failed storage medium at said drive; 

transporting an operational storage medium stored in said 
magazine to said one drive by said media transporting 
device; 

reconstructing data of said failed storage medium that 
could not be read or written from said storage media 
transported to said drives; and 

storing said reproduced data to said operating storage 
medium. 

6. A method for managing failed storage media as recited 
in claim 5, wherein said operating storage medium is stored 
beforehand in a specific position on said magazine. 

7. A method for managing failed storage media as recited 
in claim 5, wherein said specific position is at a lowermost 
position of said magazine. 
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8. A method for managing failed storage media as recited 
in claim 1, wherein said first identifier is a specific color and 
said second identifier is a hole identifiable by said media 
transporting device, 

9. A changer device comprising: 

a magazine which holds a plurality of storage media; 

a drive which reads and writes data to a storage medium 
selected from said plurality of storage media; and 

a media transporting device which transports said selected 
storage medium from said drive to said magazine and 
from said magazine to said drive, 

wherein said magazine has a tray allocated to a specific 
position, which houses failed storage media, which has 
a first identifier that indicates to a user that said tray 
houses said failed storage media, and which has a 
second identifier that indicates to said media transport- 
ing device that said tray is a destination of said failed 
storage media. 

10. A changer device according to claim 9, wherein said 
changer device detects said failed storage media, 

wherein said media transporting device transports said 
detected failed storage media to said tray by using said 
second identifier. 

11. A changer device according to claim 10, wherein said 
tray is allocated to a position that is visible to a user. 

12. A changer device according to claim 11, wherein said 
tray is allocated to a position at a top of said magazine. 

13. A changer device according to claim 9, wherein said 
tray houses a normal media, 

wherein said media transporting device puts said failed 
storage media in the place of said normal media. 

14. A changer device comprising: 

a magazine which holds a plurality of storage media; 
a plurality of drives which read and write data to storage 

mediums selected from said plurality of storage media; 

and 

a media transporting device which transports said selected 
storage medium from said plurality of drives to said 
magazine and from said magazine to said plurality of 
drives, 

wherein said magazine has a plurality of trays allocated 
to specific positions, which house failed storage 
media, which has a first identifier that indicates to a 
user that said plurality of trays house said failed 
storage media, and which has a second identifier that 
indicates to said media transporting device that said 
plurality of trays are a destination of said failed 
storage media, 

wherein said plurality of drives write data and redun- 
dant data into said storage mediums. 
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